Skip to content

build(deps): bump the java-other group across 1 directory with 4 updates#2162

Merged
wpessers merged 1 commit intomainfrom
dependabot/gradle/java/java-other-7ef3ce957b
Mar 12, 2026
Merged

build(deps): bump the java-other group across 1 directory with 4 updates#2162
wpessers merged 1 commit intomainfrom
dependabot/gradle/java/java-other-7ef3ce957b

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 9, 2026

Bumps the java-other group with 4 updates in the /java directory: com.diffplug.spotless, com.gradleup.shadow, software.amazon.awssdk:bom and gradle-wrapper.

Updates com.diffplug.spotless from 8.2.1 to 8.3.0

Updates com.gradleup.shadow from 8.3.9 to 9.3.2

Release notes

Sourced from com.gradleup.shadow's releases.

9.3.2

Changed

  • Log warnings for duplicates in the final JAR. (#1931)

Fixed

  • Fix relocation patterns not included in task fingerprint. (#1933)

9.3.1

Fixed

  • Use ASM from jdependency embedded. (#1898)
    This fixes potential classpath conflicts when using Shadow with other plugins that also use ASM.

9.3.0

Added

  • Add PatternFilterableResourceTransformer to simplify pattern based ResourceTransformers. (#1849)
  • Expose patternSet of ServiceFileTransformer as public. (#1849)
  • Expose patternSet of ApacheLicenseResourceTransformer as public. (#1850)
  • Expose patternSet of ApacheNoticeResourceTransformer as public. (#1850)
  • Expose patternSet of PreserveFirstFoundResourceTransformer as public. (#1855)
  • Support overriding output path of ApacheNoticeResourceTransformer. (#1851)
  • Add new merge strategy Fail to PropertiesFileTransformer. (#1856)
  • Add FindResourceInClasspath task to help with debugging issues with merged duplicate resources. (#1860)
  • Add MergeLicenseResourceTransformer. (#1858)
  • Add DeduplicatingResourceTransformer to deduplicate on path and content. (#1859)
  • Support disabling Kotlin module metadata remapping. (#1875)
    tasks.shadowJar {
      // Disable remapping of Kotlin module metadata (`.kotlin_module`) files. This is enabled by default.
      enableKotlinModuleRemapping = false
    }

Changed

  • Change the group of startShadowScripts from application to other. (#1797)
  • Update ASM and jdependency to support Java 26. (#1799)
  • Bump min Gradle requirement to 9.0.0. (#1801)
  • Deprecate PreserveFirstFoundResourceTransformer.resources. (#1855)
  • Make the output of PropertiesFileTransformer reproducible. (#1861)
  • Deprecate ShadowCopyAction. (#1876)
    It should not be used as a public API. Will be made internal in a future release.

Fixed

  • Fix Develocity integration when Isolated Projects enabled. (#1836)

... (truncated)

Commits

Updates software.amazon.awssdk:bom from 2.41.29 to 2.42.8

Updates gradle-wrapper from 9.3.1 to 9.4.0

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the java-other group with 4 updates in the /java directory: com.diffplug.spotless, [com.gradleup.shadow](https://github.com/GradleUp/shadow), software.amazon.awssdk:bom and gradle-wrapper.


Updates `com.diffplug.spotless` from 8.2.1 to 8.3.0

Updates `com.gradleup.shadow` from 8.3.9 to 9.3.2
- [Release notes](https://github.com/GradleUp/shadow/releases)
- [Commits](GradleUp/shadow@8.3.9...9.3.2)

Updates `software.amazon.awssdk:bom` from 2.41.29 to 2.42.8

Updates `gradle-wrapper` from 9.3.1 to 9.4.0

---
updated-dependencies:
- dependency-name: com.diffplug.spotless
  dependency-version: 8.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java-other
- dependency-name: com.gradleup.shadow
  dependency-version: 9.3.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: java-other
- dependency-name: software.amazon.awssdk:bom
  dependency-version: 2.42.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java-other
- dependency-name: gradle-wrapper
  dependency-version: 9.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java-other
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Mar 9, 2026
@dependabot dependabot bot requested a review from a team as a code owner March 9, 2026 12:44
Copy link
Member

@wpessers wpessers left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Tested the release workflow locally as well, so looks good to go.

@wpessers wpessers merged commit 695af23 into main Mar 12, 2026
13 checks passed
@wpessers wpessers deleted the dependabot/gradle/java/java-other-7ef3ce957b branch March 12, 2026 08:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant